Flowbotix – Privacy Policy

Effective Date: 15/11/2025

Company: Flowbotix Ltd (Mauritius)

Contact: support@flowbotix.tech

1. Purpose

This Privacy Policy explains how Flowbotix collects, uses, and protects personal information obtained through its appointment-booking platform, websites, and connected WhatsApp/Messenger bots.

2. Data We Collect

We collect:

• Business information: clinic name, contact details, subscription details.

• End-user information (patients/customers): name, phone number, appointment date/time, and messages sent through WhatsApp or Messenger (as processed by your chatbot).

• Technical data: device info, browser type, logs, and usage metrics.

We collect only what’s needed to deliver and improve our Service.

3. How We Use Data

Data is used to:

• Manage and deliver appointment bookings and reminders.

• Send transactional messages through connected channels.

• Provide support and service updates.

• Improve system reliability and user experience.

• Comply with legal obligations (billing, audit).

We do not sell or share personal data with third parties for marketing.

4. Legal Basis for Processing

We process data based on:

• Performance of a contract (to provide the service).

• Legitimate interest (to improve operations and ensure security).

• Consent (where required for marketing or communication).

5. Data Storage & Security

• Data is stored securely using Google Cloud infrastructure and Google Sheets under restricted access.

• Access is limited to authorized personnel.

• Encryption and audit logging are used wherever feasible.

6. Data Sharing

We share limited data with:

• WhatsApp Cloud API (Meta Platforms) for message delivery.

• Google (Calendar/Sheets) for scheduling.

• Voiceflow for chatbot automation.

• Trusted service providers bound by confidentiality agreements.

7. Data Retention

We retain appointment and message logs only as long as necessary for business or legal purposes.

You can request deletion of your account data by emailing support@flowbotix.tech.

8. Your Rights

Under the Mauritius Data Protection Act 2017, you have the right to:

• Access and correct your data.

• Request deletion or restriction of processing.

• Withdraw consent (where applicable).

Requests will be handled within 30 days.

9. International Transfers

If data is transferred outside Mauritius (e.g., to Google or Meta servers), Flowbotix ensures appropriate safeguards consistent with applicable data-protection laws.

10. Updates to This Policy

We may update this policy periodically. The updated version will be posted on our website with a new effective date.

11. Contact

For privacy or data requests, email support@flowbotix.tech.